Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: lxoLd8CXH88XFAywNPNkWzxBvtLtVRM/S364goI2EYA=
Subject key identifier: 74:57:BF:A4:12:45:7B:5F:C1:65:D8:08:1A:E1:40:68:D4:AE:53:B5
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 019688806C56E83A83E7CECD54D5CBF54E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 21:00:39 +0000
Manifest this update: Wed 30 Apr 2025 21:00:39 +0000
Manifest next update: Thu 01 May 2025 21:00:39 +0000
Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: 8D8KZ2JIjBGTRbg9tw3VdTJChsd1y/FbmnyWKIND6Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:6c:56:e8:3a:83:e7:ce:cd:54:d5:cb:f5:4e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Apr 30 21:00:39 2025 GMT
Not After : May 1 21:00:39 2025 GMT
Subject: CN=7457bfa412457b5fc165d8081ae14068d4ae53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:a6:2b:16:8c:57:9e:e9:38:66:a1:8c:c8:
f0:21:bd:c6:2e:84:7d:23:d8:85:0c:ee:bb:3d:6a:
21:b1:52:6f:b6:9b:b7:fa:c2:63:73:85:e7:9d:d6:
66:fe:f0:94:d3:36:9e:c6:71:00:6a:40:19:2f:0b:
1f:e8:eb:fb:95:70:e9:7c:e2:1b:08:30:02:cb:3d:
fa:43:b6:a9:80:dd:d7:86:c8:3a:55:a7:b9:78:88:
f7:64:26:6d:f5:df:09:a9:02:7a:75:c8:3f:eb:bc:
01:fb:3a:85:ff:30:38:f4:49:2e:e4:c5:6f:2f:51:
1f:30:87:04:84:e5:ed:84:38:a2:f5:25:cc:f1:c1:
2d:b7:54:65:30:4e:3c:57:b6:0e:6e:7d:79:a9:e3:
e8:90:4d:46:82:4c:8e:dc:24:66:8e:a2:6f:90:65:
e5:78:d3:c3:bc:d5:fb:e5:5b:c4:a8:8e:79:6f:c8:
18:22:c9:85:5f:d3:43:37:2a:a3:8c:5f:2f:cd:c8:
9a:e3:68:20:34:21:56:b4:19:d7:94:a8:36:42:8f:
6d:48:a3:4e:43:5b:d4:a5:3b:83:61:d8:3c:de:c3:
d6:3e:36:75:16:6d:80:1d:47:36:7d:0d:e5:20:a2:
1b:89:05:dd:d9:2f:16:eb:b7:fd:2d:4d:fb:66:80:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:57:BF:A4:12:45:7B:5F:C1:65:D8:08:1A:E1:40:68:D4:AE:53:B5
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:9a:5c:c5:06:a2:a5:82:22:e3:04:7b:b0:54:ed:3c:bf:
45:f7:28:c7:d5:0d:1d:3c:6e:4a:1d:7e:20:7f:90:bc:4d:ab:
34:2d:06:5c:4d:e3:b8:cb:15:ee:1b:e6:93:27:4a:69:11:ca:
3c:cc:17:a5:b9:05:c4:8f:0e:a4:52:0d:3d:b5:ba:7a:5c:c7:
dc:b7:dd:c5:d7:cc:c7:08:74:5c:30:3f:74:48:67:ee:6b:41:
47:ea:25:b1:d6:8b:c2:c5:0c:45:5c:96:b0:39:a7:04:61:20:
89:33:35:de:db:8c:c4:bb:90:ca:d0:4a:9e:30:17:95:a5:a9:
83:ac:61:85:48:3c:70:cc:9d:c9:0d:d0:32:f2:4b:c0:eb:0f:
23:7f:2b:41:9e:86:6f:7a:22:f2:c5:28:76:9c:ab:45:da:aa:
29:88:31:26:5d:9e:fc:f5:c5:5f:31:ba:37:b9:17:aa:a2:b9:
79:61:e4:92:9e:0b:03:75:81:f0:24:5c:13:5e:b1:08:27:ce:
72:f3:47:8a:52:30:47:ed:56:95:c2:c4:e6:e8:d7:ee:1e:ea:
7a:b0:a1:75:a2:e5:07:d6:3f:76:24:bd:5f:23:ea:e1:39:52:
f2:a2:82:01:32:37:97:b1:21:06:42:d3:af:0b:b2:37:92:80:
d9:5a:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:17 2025 by rpki-client